snyk 1.761.0 → 1.765.0

package/dist/cli/{925.index.js → 293.index.js}

@@ -1,5 +1,5 @@
-exports.id = 925;
-exports.ids = [925];
+exports.id = 293;
+exports.ids = [293];
 exports.modules = {
 
 /***/ 61452:
@@ -48,7 +48,7 @@ const options_validator_1 = __webpack_require__(1570);
 const types_1 = __webpack_require__(94055);
 const config_1 = __webpack_require__(22541);
 const detect = __webpack_require__(45318);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const analytics = __webpack_require__(82744);
 const api_token_1 = __webpack_require__(95181);
 const print_deps_1 = __webpack_require__(79792);
@@ -138,7 +138,7 @@ async function monitor(...args0) {
                 (packageManager ? packageManager : analysisType) +
                 ' dependencies for ' +
                 displayPath;
-            await spinner(analyzingDepsSpinnerLabel);
+            await spinner_1.spinner(analyzingDepsSpinnerLabel);
             // Scan the project dependencies via a plugin
             debug('getDepsFromPlugin ...');
             // each plugin will be asked to scan once per path
@@ -147,7 +147,7 @@ async function monitor(...args0) {
                 ...options,
                 path,
                 packageManager,
-            }), spinner.clear(analyzingDepsSpinnerLabel));
+            }), spinner_1.spinner.clear(analyzingDepsSpinnerLabel));
             analytics.add('pluginName', inspectResult.plugin.name);
             // We send results from "all-sub-projects" scanning as different Monitor objects
             // multi result will become default, so start migrating code to always work with it
@@ -170,7 +170,7 @@ async function monitor(...args0) {
                 });
             }
             const postingMonitorSpinnerLabel = 'Posting monitor snapshot for ' + displayPath + ' ...';
-            await spinner(postingMonitorSpinnerLabel);
+            await spinner_1.spinner(postingMonitorSpinnerLabel);
             // Post the project dependencies to the Registry
             for (const projectDeps of perProjectResult.scannedProjects) {
                 try {
@@ -193,7 +193,7 @@ async function monitor(...args0) {
                     const targetFileRelativePath = projectDeps.plugin.targetFile ||
                         (tFile && pathUtil.join(pathUtil.resolve(path), tFile)) ||
                         '';
-                    const res = await promiseOrCleanup(monitor_1.monitor(path, generateMonitorMeta(options, extractedPackageManager), projectDeps, options, projectDeps.plugin, targetFileRelativePath, contributors, generateProjectAttributes(options), generateTags(options)), spinner.clear(postingMonitorSpinnerLabel));
+                    const res = await promiseOrCleanup(monitor_1.monitor(path, generateMonitorMeta(options, extractedPackageManager), projectDeps, options, projectDeps.plugin, targetFileRelativePath, contributors, generateProjectAttributes(options), generateTags(options)), spinner_1.spinner.clear(postingMonitorSpinnerLabel));
                     res.path = path;
                     const monOutput = formatters_1.formatMonitorOutput(extractedPackageManager, res, options, projectName, await get_extra_project_count_1.getExtraProjectCount(path, options, inspectResult));
                     // push a good result
@@ -211,7 +211,7 @@ async function monitor(...args0) {
             results.push({ ok: false, data: err, path });
         }
         finally {
-            spinner.clearAll();
+            spinner_1.spinner.clearAll();
         }
     }
     // Part 2: process the output from the Registry
@@ -584,7 +584,7 @@ const chalk_1 = __webpack_require__(32589);
 const config_1 = __webpack_require__(22541);
 const is_ci_1 = __webpack_require__(10090);
 const promise_1 = __webpack_require__(90430);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const plugins_1 = __webpack_require__(78053);
 const formatters_1 = __webpack_require__(81329);
 const get_extra_project_count_1 = __webpack_require__(34355);
@@ -601,7 +601,7 @@ async function monitorEcosystem(ecosystem, paths, options) {
     const scanResultsByPath = {};
     for (const path of paths) {
         try {
-            await spinner(`Analyzing dependencies in ${path}`);
+            await spinner_1.spinner(`Analyzing dependencies in ${path}`);
             options.path = path;
             const pluginResponse = await plugin.scan(options);
             scanResultsByPath[path] = pluginResponse.scanResults;
@@ -618,7 +618,7 @@ async function monitorEcosystem(ecosystem, paths, options) {
             throw error;
         }
         finally {
-            spinner.clearAll();
+            spinner_1.spinner.clearAll();
         }
     }
     const [monitorResults, errors] = await selectAndExecuteMonitorStrategy(ecosystem, scanResultsByPath, options);
@@ -653,7 +653,7 @@ async function monitorDependencies(scans, options) {
     const results = [];
     const errors = [];
     for (const [path, scanResults] of Object.entries(scans)) {
-        await spinner(`Monitoring dependencies in ${path}`);
+        await spinner_1.spinner(`Monitoring dependencies in ${path}`);
         for (const scanResult of scanResults) {
             const monitorDependenciesRequest = await generateMonitorDependenciesRequest(scanResult, options);
             const configOrg = config_1.default.org ? decodeURIComponent(config_1.default.org) : undefined;
@@ -692,7 +692,7 @@ async function monitorDependencies(scans, options) {
                 });
             }
         }
-        spinner.clearAll();
+        spinner_1.spinner.clearAll();
     }
     return [results, errors];
 }
@@ -827,7 +827,7 @@ exports.findAndLoadPolicyForScanResult = findAndLoadPolicyForScanResult;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.resolveAndMonitorFacts = void 0;
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const polling_monitor_1 = __webpack_require__(59354);
 const plugin_analytics_1 = __webpack_require__(33077);
 const errors_1 = __webpack_require__(55191);
@@ -836,7 +836,7 @@ async function resolveAndMonitorFacts(scans, options) {
     const results = [];
     const errors = [];
     for (const [path, scanResults] of Object.entries(scans)) {
-        await spinner(`Resolving and Monitoring fileSignatures in ${path}`);
+        await spinner_1.spinner(`Resolving and Monitoring fileSignatures in ${path}`);
         for (const scanResult of scanResults) {
             try {
                 const res = await polling_monitor_1.requestMonitorPollingToken(options, true, scanResult);
@@ -868,7 +868,7 @@ async function resolveAndMonitorFacts(scans, options) {
                 });
             }
         }
-        spinner.clearAll();
+        spinner_1.spinner.clearAll();
     }
     return [results, errors];
 }
@@ -884,14 +884,14 @@ exports.resolveAndMonitorFacts = resolveAndMonitorFacts;
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.resolveAndTestFacts = void 0;
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const polling_test_1 = __webpack_require__(77584);
 const plugin_analytics_1 = __webpack_require__(33077);
 async function resolveAndTestFacts(ecosystem, scans, options) {
     const results = [];
     const errors = [];
     for (const [path, scanResults] of Object.entries(scans)) {
-        await spinner(`Resolving and Testing fileSignatures in ${path}`);
+        await spinner_1.spinner(`Resolving and Testing fileSignatures in ${path}`);
         for (const scanResult of scanResults) {
             try {
                 const res = await polling_test_1.requestTestPollingToken(options, true, scanResult);
@@ -906,6 +906,7 @@ async function resolveAndTestFacts(ecosystem, scans, options) {
                     issuesData: response === null || response === void 0 ? void 0 : response.issuesData,
                     depGraphData: response === null || response === void 0 ? void 0 : response.depGraphData,
                     depsFilePaths: response === null || response === void 0 ? void 0 : response.depsFilePaths,
+                    fileSignaturesDetails: response === null || response === void 0 ? void 0 : response.fileSignaturesDetails,
                 });
             }
             catch (error) {
@@ -919,7 +920,7 @@ async function resolveAndTestFacts(ecosystem, scans, options) {
             }
         }
     }
-    spinner.clearAll();
+    spinner_1.spinner.clearAll();
     return [results, errors];
 }
 exports.resolveAndTestFacts = resolveAndTestFacts;
@@ -938,7 +939,7 @@ const config_1 = __webpack_require__(22541);
 const is_ci_1 = __webpack_require__(10090);
 const promise_1 = __webpack_require__(90430);
 const types_1 = __webpack_require__(55246);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const plugins_1 = __webpack_require__(78053);
 const common_1 = __webpack_require__(53110);
 const api_token_1 = __webpack_require__(95181);
@@ -953,12 +954,12 @@ async function testEcosystem(ecosystem, paths, options) {
     }
     const scanResultsByPath = {};
     for (const path of paths) {
-        await spinner(`Scanning dependencies in ${path}`);
+        await spinner_1.spinner(`Scanning dependencies in ${path}`);
         options.path = path;
         const pluginResponse = await plugin.scan(options);
         scanResultsByPath[path] = pluginResponse.scanResults;
     }
-    spinner.clearAll();
+    spinner_1.spinner.clearAll();
     const [testResults, errors] = await selectAndExecuteTestStrategy(ecosystem, scanResultsByPath, options);
     const stringifiedData = JSON.stringify(testResults, null, 2);
     if (options.json) {
@@ -981,7 +982,7 @@ async function testDependencies(scans, options) {
     const results = [];
     const errors = [];
     for (const [path, scanResults] of Object.entries(scans)) {
-        await spinner(`Testing dependencies in ${path}`);
+        await spinner_1.spinner(`Testing dependencies in ${path}`);
         for (const scanResult of scanResults) {
             const payload = {
                 method: 'POST',
@@ -1012,7 +1013,7 @@ async function testDependencies(scans, options) {
             }
         }
     }
-    spinner.clearAll();
+    spinner_1.spinner.clearAll();
     return [results, errors];
 }
 
@@ -1949,25 +1950,32 @@ function extractReportingDescriptor(results) {
 }
 exports.extractReportingDescriptor = extractReportingDescriptor;
 function mapIacTestResponseToSarifResults(issues) {
-    return issues.map(({ targetPath, issue }) => ({
-        ruleId: issue.id,
-        message: {
-            text: `This line contains a potential ${issue.severity} severity misconfiguration affecting the ${issue.subType}`,
-        },
-        locations: [
-            {
-                physicalLocation: {
-                    artifactLocation: {
-                        uri: targetPath,
-                        uriBaseId: PROJECT_ROOT_KEY,
-                    },
-                    region: {
-                        startLine: issue.lineNumber,
+    return issues.map(({ targetPath, issue }) => {
+        const hasLineNumber = issue.lineNumber && issue.lineNumber >= 0;
+        return {
+            ruleId: issue.id,
+            message: {
+                text: `This line contains a potential ${issue.severity} severity misconfiguration affecting the ${issue.subType}`,
+            },
+            locations: [
+                {
+                    physicalLocation: {
+                        artifactLocation: {
+                            uri: targetPath,
+                            uriBaseId: PROJECT_ROOT_KEY,
+                        },
+                        // We exclude the `region` key when the line number is missing or -1.
+                        // https://docs.oasis-open.org/sarif/sarif/v2.0/csprd02/sarif-v2.0-csprd02.html#_Toc10127873
+                        ...(hasLineNumber && {
+                            region: {
+                                startLine: issue.lineNumber,
+                            },
+                        }),
                     },
                 },
-            },
-        ],
-    }));
+            ],
+        };
+    });
 }
 exports.mapIacTestResponseToSarifResults = mapIacTestResponseToSarifResults;
 
@@ -4251,7 +4259,7 @@ exports.parse = void 0;
 const baseDebug = __webpack_require__(15158);
 const debug = baseDebug('snyk-test');
 const path = __webpack_require__(85622);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const analytics = __webpack_require__(82744);
 const fs = __webpack_require__(35747);
 const lockFileParser = __webpack_require__(423);
@@ -4281,12 +4289,12 @@ async function parse(root, targetFile, options) {
     const resolveModuleSpinnerLabel = `Analyzing npm dependencies for ${lockFileFullPath}`;
     debug(resolveModuleSpinnerLabel);
     try {
-        await spinner(resolveModuleSpinnerLabel);
+        await spinner_1.spinner(resolveModuleSpinnerLabel);
         const strictOutOfSync = options.strictOutOfSync !== false;
         return lockFileParser.buildDepTreeFromFiles(root, manifestFileFullPath, lockFileFullPath, options.dev, strictOutOfSync);
     }
     finally {
-        await spinner.clear(resolveModuleSpinnerLabel)();
+        await spinner_1.spinner.clear(resolveModuleSpinnerLabel)();
     }
 }
 exports.parse = parse;
@@ -4306,7 +4314,7 @@ const fs = __webpack_require__(35747);
 const resolveNodeDeps = __webpack_require__(40068);
 const baseDebug = __webpack_require__(15158);
 const isEmpty = __webpack_require__(99245);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const analytics = __webpack_require__(82744);
 const get_file_contents_1 = __webpack_require__(84210);
 const debug = baseDebug('snyk-nodejs-plugin');
@@ -4355,12 +4363,12 @@ async function parse(root, targetFile, options) {
     const resolveModuleSpinnerLabel = 'Analyzing npm dependencies for ' +
         path.dirname(path.resolve(root, targetFile));
     try {
-        await spinner.clear(resolveModuleSpinnerLabel)();
-        await spinner(resolveModuleSpinnerLabel);
+        await spinner_1.spinner.clear(resolveModuleSpinnerLabel)();
+        await spinner_1.spinner(resolveModuleSpinnerLabel);
         return resolveNodeDeps(root, Object.assign({}, options, { noFromArrays: true }));
     }
     finally {
-        await spinner.clear(resolveModuleSpinnerLabel)();
+        await spinner_1.spinner.clear(resolveModuleSpinnerLabel)();
     }
 }
 exports.parse = parse;
@@ -4689,16 +4697,16 @@ const code_client_1 = __webpack_require__(95951);
 const legacy_1 = __webpack_require__(34013);
 const api_token_1 = __webpack_require__(95181);
 const config_1 = __webpack_require__(22541);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const utils_1 = __webpack_require__(33113);
 const unsupported_feature_snyk_code_error_1 = __webpack_require__(90551);
 const proxy_from_env_1 = __webpack_require__(21394);
 const global_agent_1 = __webpack_require__(97959);
 async function getCodeAnalysisAndParseResults(root, options) {
-    await spinner.clearAll();
+    await spinner_1.spinner.clearAll();
     utils_1.analysisProgressUpdate();
     const codeAnalysis = await getCodeAnalysis(root, options);
-    spinner.clearAll();
+    spinner_1.spinner.clearAll();
     return parseSecurityResults(codeAnalysis);
 }
 exports.getCodeAnalysisAndParseResults = getCodeAnalysisAndParseResults;
@@ -5082,15 +5090,15 @@ Object.defineProperty(exports, "analysisProgressUpdate", ({ enumerable: true, ge
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.analysisProgressUpdate = void 0;
 const code_client_1 = __webpack_require__(95951);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 function analysisProgressUpdate() {
     let currentMessage = '';
     const showSpinner = (message) => {
         if (currentMessage === message)
             return;
-        spinner.clear(currentMessage)();
+        spinner_1.spinner.clear(currentMessage)();
         currentMessage = message;
-        return spinner(message);
+        return spinner_1.spinner(message);
     };
     code_client_1.emitter.on('supportedFilesLoaded', () => showSpinner(`Supported extensions loaded`));
     code_client_1.emitter.on('scanFilesProgress', (processed) => showSpinner(`Scanning files: ${Math.round(processed / 100)}00`));
@@ -5281,6 +5289,7 @@ const promise_1 = __webpack_require__(90430);
 const common_1 = __webpack_require__(53110);
 const api_token_1 = __webpack_require__(95181);
 const common_2 = __webpack_require__(74434);
+const monitor_1 = __webpack_require__(3708);
 async function requestMonitorPollingToken(options, isAsync, scanResult) {
     if ((scanResult === null || scanResult === void 0 ? void 0 : scanResult.target) && scanResult.target['remoteUrl'] === '') {
         scanResult.target['remoteUrl'] = scanResult.name;
@@ -5317,6 +5326,8 @@ async function pollingMonitorWithTokenUntilDone(token, isAsync, options, pollInt
             isAsync,
             resolutionMeta,
             method: 'cli',
+            tags: monitor_1.generateTags(options),
+            attributes: monitor_1.generateProjectAttributes(options),
             projectName: (resolutionMeta === null || resolutionMeta === void 0 ? void 0 : resolutionMeta.name) || options['project-name'] || config_1.default.PROJECT_NAME,
         },
     };
@@ -5376,8 +5387,14 @@ async function pollingTestWithTokenUntilDone(token, type, options, pollInterval,
     };
     const response = await promise_1.makeRequest(payload);
     if (response.result) {
-        const { issues, issuesData, depGraphData, depsFilePaths } = response.result;
-        return { issues, issuesData, depGraphData, depsFilePaths };
+        const { issues, issuesData, depGraphData, depsFilePaths, fileSignaturesDetails, } = response.result;
+        return {
+            issues,
+            issuesData,
+            depGraphData,
+            depsFilePaths,
+            fileSignaturesDetails,
+        };
     }
     await common_2.delayNextStep(attemptsCount, maxAttempts, pollInterval);
     return await pollingTestWithTokenUntilDone(token, type, options, pollInterval, attemptsCount, maxAttempts);
@@ -5736,7 +5753,7 @@ const config_1 = __webpack_require__(22541);
 const is_ci_1 = __webpack_require__(10090);
 const ecosystems_1 = __webpack_require__(5168);
 const common_1 = __webpack_require__(53110);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const policy_1 = __webpack_require__(4669);
 const api_token_1 = __webpack_require__(95181);
 const errors_1 = __webpack_require__(55191);
@@ -5756,9 +5773,9 @@ async function assembleEcosystemPayloads(ecosystem, options) {
         analysisTypeText +
         (path.relative('.', path.join(options.path, options.file || '')) ||
             path.relative('..', '.') + ' project dir');
-    spinner.clear(spinnerLbl)();
+    spinner_1.spinner.clear(spinnerLbl)();
     if (!options.quiet) {
-        await spinner(spinnerLbl);
+        await spinner_1.spinner(spinnerLbl);
     }
     try {
         const plugin = ecosystems_1.getPlugin(ecosystem);
@@ -5801,7 +5818,7 @@ async function assembleEcosystemPayloads(ecosystem, options) {
         throw error;
     }
     finally {
-        spinner.clear(spinnerLbl)();
+        spinner_1.spinner.clear(spinnerLbl)();
     }
 }
 exports.assembleEcosystemPayloads = assembleEcosystemPayloads;
@@ -6119,7 +6136,7 @@ const api_token_1 = __webpack_require__(95181);
 const ecosystems_1 = __webpack_require__(5168);
 const assemble_payloads_1 = __webpack_require__(38080);
 const request_1 = __webpack_require__(52050);
-const spinner = __webpack_require__(86766);
+const spinner_1 = __webpack_require__(86766);
 const debug = debugModule('snyk:run-test');
 const ANALYTICS_PAYLOAD_MAX_LENGTH = 1024;
 function prepareResponseForParsing(payload, response, options) {
@@ -6227,9 +6244,9 @@ async function sendAndParseResults(payloads, spinnerLbl, root, options) {
         const maxConcurrent = 25;
         const queue = new Queue(maxConcurrent);
         const iacResults = [];
-        await spinner.clear(spinnerLbl)();
+        await spinner_1.spinner.clear(spinnerLbl)();
         if (!options.quiet) {
-            await spinner(spinnerLbl);
+            await spinner_1.spinner(spinnerLbl);
         }
         for (const payload of payloads) {
             iacResults.push(queue.add(async () => {
@@ -6244,9 +6261,9 @@ async function sendAndParseResults(payloads, spinnerLbl, root, options) {
     }
     const results = [];
     for (const payload of payloads) {
-        await spinner.clear(spinnerLbl)();
+        await spinner_1.spinner.clear(spinnerLbl)();
         if (!options.quiet) {
-            await spinner(spinnerLbl);
+            await spinner_1.spinner(spinnerLbl);
         }
         /** sendTestPayload() deletes the request.body from the payload once completed. */
         const payloadCopy = Object.assign({}, payload);
@@ -6254,7 +6271,7 @@ async function sendAndParseResults(payloads, spinnerLbl, root, options) {
         const { depGraph, payloadPolicy, pkgManager, targetFile, projectName, foundProjectCount, displayTargetFile, dockerfilePackages, platform, scanResult, } = prepareResponseForParsing(payloadCopy, res, options);
         const ecosystem = ecosystems_1.getEcosystem(options);
         if (ecosystem && options['print-deps']) {
-            await spinner.clear(spinnerLbl)();
+            await spinner_1.spinner.clear(spinnerLbl)();
             await print_deps_1.maybePrintDepGraph(options, depGraph);
         }
         const legacyRes = convertIssuesToAffectedPkgs(res);
@@ -6305,7 +6322,7 @@ async function runTest(projectType, root, options) {
             `Failed to test ${projectType} project`, error.code);
     }
     finally {
-        spinner.clear(spinnerLbl)();
+        spinner_1.spinner.clear(spinnerLbl)();
     }
 }
 exports.runTest = runTest;
@@ -6448,9 +6465,9 @@ async function assembleLocalPayloads(root, options) {
             path.relative('..', '.') + ' project dir');
     try {
         const payloads = [];
-        await spinner.clear(spinnerLbl)();
+        await spinner_1.spinner.clear(spinnerLbl)();
         if (!options.quiet) {
-            await spinner(spinnerLbl);
+            await spinner_1.spinner(spinnerLbl);
         }
         if (options.iac) {
             return run_iac_test_1.assembleIacLocalPayloads(root, options);
@@ -6458,7 +6475,7 @@ async function assembleLocalPayloads(root, options) {
         const deps = await get_deps_from_plugin_1.getDepsFromPlugin(root, options);
         const failedResults = deps.failedResults;
         if (failedResults === null || failedResults === void 0 ? void 0 : failedResults.length) {
-            await spinner.clear(spinnerLbl)();
+            await spinner_1.spinner.clear(spinnerLbl)();
             if (!options.json && !options.quiet) {
                 console.warn(chalk_1.default.bold.red(`${theme_1.icon.ISSUE} ${failedResults.length}/${failedResults.length +
                     deps.scannedProjects
@@ -6500,11 +6517,11 @@ async function assembleLocalPayloads(root, options) {
                 : scannedProject.depTree;
             if (options['print-deps']) {
                 if (scannedProject.depGraph) {
-                    await spinner.clear(spinnerLbl)();
+                    await spinner_1.spinner.clear(spinnerLbl)();
                     print_deps_1.maybePrintDepGraph(options, pkg);
                 }
                 else {
-                    await spinner.clear(spinnerLbl)();
+                    await spinner_1.spinner.clear(spinnerLbl)();
                     print_deps_1.maybePrintDepTree(options, pkg);
                 }
             }
@@ -6650,7 +6667,7 @@ async function assembleLocalPayloads(root, options) {
         return payloads;
     }
     finally {
-        await spinner.clear(spinnerLbl)();
+        await spinner_1.spinner.clear(spinnerLbl)();
     }
 }
 // Payload to send to the Registry for scanning a remote package.
@@ -6762,7 +6779,6 @@ Object.defineProperty(snyk, 'api', {
 
 snyk.test = __webpack_require__(53378);
 snyk.policy = __webpack_require__(70535);
-snyk.isRequired = true; // changed to false when loaded via cli
 
 // this is the user config, and not the internal config
 snyk.config = __webpack_require__(28137).config;
@@ -6933,4 +6949,4 @@ function validateProjectType(options, projectType) {
 
 };
 ;
-//# sourceMappingURL=925.index.js.map
+//# sourceMappingURL=293.index.js.map